WEBSHELL_PHP_Assert_Gen_Oct20

Rule Info

Tags
['WEBSHELL', 'T1100', 'GEN']
Name
WEBSHELL_PHP_Assert_Gen_Oct20
Minimum Yara
1.7
Rule Hash
325adedd628f7ed54a67f1a6ab57b4e8
Av Ratio
4.61
Score
70
Author
Florian Roth
Date
2020-10-17
Description
Detects small webshell
Required Modules
[]

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
4
Suspicious (< 10 engines)
155
Clean (0 engines)
0

Rule Matches

Hash
Timestamp
Total
Positives
VT
d2b1d05109c59e38bba17f5518c9ac9bb8d1d70a445ca561796828db8ac99357
2021-06-08 05:31:46
58
2
87ff62dea7e3f97dad1e9379e4d800ae5abed5caf4857cf532d37ae24e5eb542
2021-06-02 20:25:41
57
2
1d42f3d22ff7858de3f96e4abffd20a846020aa2ac49f325191151bd64d203fc
2021-05-29 00:03:05
58
4
3b42a75b7ca42aa814cce27a24e47f722f4ba65f7f324223a434c53afb0929a2
2021-05-27 02:34:50
59
2
4909d97ecca4795fb199db132464aef5c766e3f2697f4d94a0fb07af8de2f918
2021-05-21 03:24:27
59
1
aadfba8997a8926d7d36fda4e874d1bab3b1c5c576223dd4b08c7d15c7134264
2021-05-20 15:44:40
54
1
492063f0272107f252d350d46ca40b99e464dcdc4440a488becd257abdea5cca
2021-05-20 15:35:06
59
1
8dea32021b2e021456bbba80be75ee35d0c364f178ff0ba8f84d8c59750080c9
2021-05-20 15:22:59
59
2
d2439a435359f8fbff3034470956df70caedbf23837d05b70ed6634fbc839e85
2021-05-20 14:58:08
58
1
6776251e40a6577b9373487c48481d91fe915f164f4160396949775aa00db47f
2021-05-20 14:43:21
58
1
f3a6af93ea29a8be716eb3c355cd30a126632324982bd8991dc1e346073f8ffc
2021-05-20 14:33:52
57
1
7a74da02e7ff2c786d70f561fd7dd70aa762c7b3514fc87f1d0810861585df53
2021-05-20 12:18:26
54
2
23a3165053762240cb51af38e5cb1d27460d89093ec0df454694ef8149e5514f
2021-05-19 04:15:32
47
1
473d8fe59288555e65c83504c4247f68e9a9d4e50326e90a40a178cd6d740d47
2021-05-19 03:34:23
57
2
0d226b8fc4bc765ce519d82795c69adeadc6488c126d0d05e3082f09185a4fa8
2021-05-19 02:37:22
57
3
614077288afa60c7a09f3628764b69aacf6c646b7701872815c020e5daf16275
2021-05-19 02:37:02
57
3
5b1ee34d7ab5a9827534a258be43bccb971e210ce002930b1b080121f886d489
2021-05-19 01:49:26
57
2
434743e44a1eaeaf8eea24ac77df6f95a1d359b11a5926f2ebebfaecc7eb2960
2021-05-19 01:39:29
55
2
98bd68fbf0615f627a9713bb57039901720feb165e10f6388c1ae0ff8d167d5c
2021-05-18 23:38:29
53
1
ecc15cc9262545d5e5253b6dfc6b3e77d25839855cc09bd6645c3371a2e7ec7c
2021-05-08 14:29:39
58
2
97d670288590f48e0a4e8c034a32b7f54f5bcf1ee5a26764d883da18477caf8b
2021-05-07 23:59:59
58
1
6ff79e7ec03fc551229738b203d82c5d0eebe4df517d317811bb514bde6aa89c
2021-05-06 23:19:55
58
2
da6f3b19a624a4b3d3f195687b418e0e4a69de7faa7f9c1fe87ca7aeb69cba40
2021-05-06 21:57:00
57
2
ebe4094e02ee3ec86813b3359a39c4254836b9678b8c932280389a1252fcde49
2021-05-06 04:21:34
59
1
e2a408c281e3a604a5dd9ecd63c0c5dfcc328232594d9f05ffa82c1a05fe851c
2021-05-05 23:01:47
58
1
6e2c04ae4997330d8869b59c02e541bc00450ef62484e5c5e2e23a4b1bc57cca
2021-05-04 21:25:47
58
1
dfc7848079f51a3010b7e30bb62924ba307495c43862287f62f0ee8030277b16
2021-05-04 21:06:37
59
1
9d4b8c12ffbcb864d6dfe72754175847844c77203abea526bc2a4e46619c4377
2021-04-25 19:51:36
58
2
4c3fa069bba4cfb5961f98ca16a24d81f9b69dc16734f6ed56eff0d4b6f01057
2021-04-22 10:06:23
58
3
aab32716680060738abd5957dbb0b099a3383d539f1e84bbf9178f0864c1034a
2021-04-21 03:43:39
57
2
10092c50921a90cb7a4b6516c4549176d1a21622df391fe0b6e8b2796a7d13c7
2021-04-21 03:14:52
56
2
1dd23ef99e1ba129d39f9fbbad023583a7ae4d295011aa46325cd00f6c853cb6
2021-04-20 10:15:56
56
4
e96ab3528479ecfccd80893f0cbb56eee333eaab24d061f6b5b0d8f422ba80ba
2021-04-20 09:58:02
58
3
2de48a1a65a57137065cd7cd3d0832251121a72adefffcee4f03bfeac530b9ce
2021-04-20 04:40:14
58
1
22f57178eb9a41c8cc1a266eba59c780b65d7536a6e6f2e95c5372208a322b85
2021-04-20 03:22:58
56
3
3421326360288cd4ab258f898dd531455c39b2a6744ec3712e4b212bde75c256
2021-04-20 01:45:19
58
2
8f7c7b5715c575aa7b613e8b26c439ffa49be290fbb7bbb95ff118387a1b2858
2021-04-20 01:45:10
58
3
8b9e353ef81b51389a437f100b6b551201cb8812c5546be9bb36909e799d972b
2021-04-20 01:43:20
58
2
182f37c3b3bd546d93d090e0c3e18e17e80224afd60d554a9bff52a2ecb860b7
2021-04-20 01:43:12
55
2
f17bab24eeaa20fe0399ed936c87d90ce6e6159b7c40555381d5ba0835517ad6
2021-04-20 01:24:44
58
2
9eee0d7c2fba8263f81937c77d39a269902f24c21a3cf92d828c803989a362d5
2021-04-20 01:12:49
57
2
ceda020090b8e6880e28b14b11b1a1dc802cebe901bd03a7afa5d0ccaf96bef2
2021-04-19 22:51:42
58
2
022cbd41e61f76d387ac8801149ad97394fa878eb520558fb8274cf79fb7c06c
2021-04-16 22:05:57
57
2
6ab29a3df46ccfc2382ae0bfdc61585e02496d9357381306dc14e43f9cbeb6e1
2021-04-10 02:37:55
61
3
dd04f0e9a1c21cfc5118478decc1281eccddf161907b8a196d78ca70b2d05ccb
2021-04-06 11:51:18
58
3
8a6067117752f40f21462aec71aebdc2172018f7c181edd2fc51c45114d9a12d
2021-04-01 23:14:07
58
4
c5b17786af608d413329200d4e4a6c7d667eafb9b3581d3671856b060d97c65b
2021-03-30 22:11:51
57
3
672500b7ebb0146cd3d8a31ea0917f633dcb101bac513780f1b8e262b37553c0
2021-03-29 09:53:12
54
3
df6430268e94975153c2053b84d7102987a29bc6819194c2846a5c1bf9a6a23c
2021-03-27 20:41:50
58
4
d97f97de3dcb41097e3bee266b09ae30ee68468488d9de2d4ef18b7469c46ead
2021-03-25 20:30:22
57
4
c5f5c1e7e9991ff057f71bdadcb4963dffd92ff7fac3124354f7e94881e69721
2021-03-25 05:31:58
59
3
aa2ed1a3a66708249974f0e7da18c1d48a0e98fdb74e76a3a169cf574edd674b
2021-03-22 18:59:56
59
3
95e635c52bca3c41cb84befe74043227fe8498c49104dd07e47d80a2e10a4183
2021-03-22 03:34:07
59
3
e75859b91da465c38758d124005fae7e41b8bf8ca181cbf7d60caf41bee396ee
2021-03-20 18:58:58
59
5
e74b4baa2c0975314aa7275922a371c5678c7a3dc14a6dc5a467173960ca62a7
2021-03-20 18:40:32
59
3
7cffefd7dd1f8f984a3d0d2a168ece07792dd95bb5eef2541a9ec0fd7fe08b55
2021-03-20 00:55:19
62
3
f9ee23f447238c67d49c75696b1fc63057c660856bb6efa3040264c70d41e05c
2021-03-17 16:38:11
58
3
264116d2e47ab72520e3df9c7f1c13c44d7fe54f6c4c10d97fd81249e394fb14
2021-03-16 07:18:07
52
4
b5d0ec685279dd25de515181147262f89338a4e388286f627ec1bfb2634e7c73
2021-03-16 04:35:58
58
3
c232268a02b6b1df680751541795969079aec101cea83737e285fd3cf6c6f736
2021-03-16 04:15:03
56
5
55df5d75e99bcbae50bd4d41566cfabb8333c83e9cd60df0b652200c3540fbc6
2021-03-15 15:49:57
58
5
a83d2ce813a4428a565acf0029287d7d4649db99390a37989565bd0ac86eb8ca
2021-03-14 05:16:35
57
12
d15af68124f4cca180f5538e478e97c12613b9d5eda72ecd618a6d9e7b7541b0
2021-03-14 03:46:21
57
3
7ead1af209e3ed319b2abfa21826f7565644b3f8569513152deafe97e06b5765
2021-03-12 21:22:44
58
3
1b5e491108adace7f50f867238489ee6d6b16aced83dfa374633e246a102c15c
2021-03-11 23:00:38
57
3
fae32387e659a2907468e009e05752d5701fe67e967b12827c80cb13c8fd7c3c
2021-03-11 22:03:02
58
3
77e94fb2274f366f451f3c50776c2a3f73d0dbc925c7355176f048314a4c4edb
2021-03-11 18:14:05
58
4
31b74aae45a249f8a9c24d2bce5bb283b8af553ea86dea1728f69d704054874d
2021-03-10 20:46:19
55
3
53f3177bb2e9abc88a6753471c1a673b47153876d654b938a3b0fe8fcae52ffd
2021-03-09 07:34:40
59
4
623b033f4f10587ab3aa1cb0eb87926c02a980bf8edce30698407cddf49cef39
2021-03-09 07:22:59
59
4
99c0dca7d401a7afde697ddc52356ae1be32f9cf432e943d5dd864d770d2a225
2021-03-09 06:58:50
56
4
87d7cc05c778a512f209f751d21dc6da50caf2b193d6923eacd30950d0a0dbfd
2021-03-09 06:14:00
57
4
9afb8a2161d58343553c2e126caa1ef77778fc6380f51465caf77b6f8c5ade1b
2021-03-09 05:47:16
59
5
d2ea228e45527b8eda581c43bd91ccfaae925bfd3fb32f4a20f87db79ca3f15c
2021-03-09 05:46:13
59
4
8ab304e45c78e4db6c3f2e51d11e1223eb028f6562fcf6c5e0a2b9b9b9ae5dc1
2021-03-09 05:34:53
59
3
f34a31f90f14964f266ff41fec9d185ac011112d678b78c598c8348b35a15792
2021-03-09 05:09:38
56
3
b7c4a338431b2e5054ca80924b34e4e2a942df0bd03dfcea58d411ce800a6b46
2021-03-08 22:04:45
56
3
1d5e89d5a38d16e412beaa3a8bc054b9f7403b7be2d36fdca2d0f287170d833f
2021-03-08 21:05:58
59
3
82e1710c93a546100e6b54770a783f8083af017429a99d16004342b692e6342d
2021-03-06 04:07:28
59
3
0f5460451409deacc70537ccda28f51befcf4c139d7143588af01433a2feeee8
2021-03-05 20:05:13
49
3
cb6684efd3a2a55bf8bfb899d08a52c54f5ad1c0170ba12338a7d6256d77208b
2021-03-04 12:07:03
59
2
59a667cf5bfb3ef60b56cd706f91fd91fa379db92693e1080900cd28a8d215ce
2021-02-26 06:36:56
58
3
a1eca85895cf70718e6222b01d353d240b5adabf69f4af4a6097ea44cb3c51f0
2021-02-26 00:54:41
59
2
dfa83a795a14552da2575e3c7a04dd72725ee38661f74a06993b2479cd111a1d
2021-02-25 00:56:04
58
2
bf090a33166b234bb9d294911a2da0343736892b3fd3b3b9b07bc2a04adb897e
2021-02-24 09:48:11
59
4
58512348c69529b625402f91e33d5efcf8ea7c5bb6ca9587b16a461cfe78e5d2
2021-02-22 01:29:31
59
1
e043416604dcce69e8a703e8376a4ec29462ee5c7dbfef9dcda2e7be8d47cf19
2021-02-22 00:12:27
59
2
58bb4e16b015945cd3d9f3af6bed82e865ee35e9eb5b4e4456101c165c4ddf63
2021-02-21 21:00:43
59
2
0788177137a95efb26f8b2ca34d1a5d323b774fa82499b0925ddcfb588ec0472
2021-02-21 18:18:12
58
2
9f4b921be091076c85d3cfcdb6623c7e68caac42e6327ed23347e713df109dec
2021-02-21 10:45:40
59
2
126d79a28b5e39e815aef9501ed867e6cb3ffcb3c9c0180bc15ee7250fea100f
2021-02-19 23:39:19
58
2
7d55c8fc583a44dd0d1ad85a63b869b6e86a00894b711b989ac1d4c9ea6d6b4c
2021-02-16 19:46:51
59
1
d4d35bb7241b91ccf4dec01c12c3dd40e06272d9618b8625a2b1c2e6f9ce685b
2021-01-31 10:26:45
59
13
c6375d76a8c077eb86735aa5d7685a31532a889e632d009217d952bd3413f3ee
2021-01-31 09:22:39
58
3
1aaf363be6594ae2b65816d2da973d9ea41f111636251fec8b443a03c0ecd05a
2021-01-31 08:18:31
58
2
bb0755aca6917f08792af211ab92c0ade46bebed3fa0d786e2ac327355d1c3e1
2021-01-28 08:34:22
56
2
b2a7c7b2c5ad5134b6e28be13e7cb0105d613ea467fbe12c77e1b2dfcc4de422
2021-01-28 06:43:17
59
2
2a83ad9a1a2be9e1d7e3ddda77b758d6914fa72d94d75924e4579867a1cfeaf4
2021-01-27 11:46:11
59
1
b2e30964c312ab0bf2abc52f99f63475a4929e2ecd9ae236e99bf40d8615349b
2021-01-26 12:50:55
59
2
1030db8b20c98f97cf666aa1be18a54293f34a291a4bc517c4a6049388146ccd
2021-01-24 16:22:30
59
2
2b392335b2ea312e693481487c6fe8aaee94ace1a1974815191e91e5fed48fc0
2021-01-22 15:49:29
59
2
faa340a5ac43eb6d54658c3127935708bb7cfa807c7041c8bce55e7a646acf59
2021-01-22 12:41:29
58
2
020f8af3ec3c2fb25319338a1d3ea3585b6ba6306a603bf15aa1d78b3fcd101a
2021-01-22 12:40:28
52
1
a088ff7ab32721f093cb32ce5c2ef88c05c9b66ecc2e3eee271d5826edfd3560
2021-01-22 12:34:16
47
1
6c238dc946aeb7171a0f13f61937e107b4578b608663ba8368132de4d258ad88
2021-01-22 12:25:28
56
1
66019a752279499cce73137aa404ba65df89ad107ff439726d0ed9beb5c422c0
2021-01-22 11:48:38
58
2
af53cea7775fc2e3ebcb792e55501fef6f154184e5476bb53aa47d976fd30bc2
2021-01-19 04:25:21
56
2
1ace3ded3c776ff61fe0e111f3525d67690a8ecbe9f73d402f2596fdcc73c5cc
2021-01-18 19:43:58
58
2
7856ed2c67478cae2058601335622ef5511b4bb32016c5509ecf20540d790613
2021-01-18 19:18:37
58
2
83edf539b02ffba2165f9a6ad20c36615ada8082857633f144c03197284690f5
2021-01-18 18:11:36
58
2
4fa880ace804f35b01813afefc1393b9a51d9068c7f6b43cd24474e8ba012a68
2021-01-17 02:03:14
59
2
9b9fe32af573e36db26c0018a8549221bd60f67f8b4e80370df0c063d59edfba
2021-01-16 09:48:29
59
3
03636ff1900f0ddd64ec26290bab2fd19d47fc2cb8c26845f4ba4d5a338eb015
2021-01-16 04:33:39
59
2
6f23d912dc08b7d848089469d68bac585edf7822acd694e72c9ebbe2acf898f2
2021-01-16 01:15:07
58
2
f5d4347ab335fe8522acfc07327b698ff7e188c3c77c9834064fd67ce5805f1a
2021-01-15 05:34:08
60
4
6c1b9e7f3cd6bcbf7e5311183fcf3d632feabbc3b2eda1581052ed41a04b4344
2021-01-10 18:07:49
59
3
d72dce926b3065c9ec1469fa835f03361af270839dfa2fb846d6aeee8023ad17
2021-01-07 05:57:52
60
2
c1597a9d7897980d2de645d4f3a88eeaee4edc6eb4950373b3e7d52b7e658774
2021-01-01 00:56:22
60
2
376eb1f25b99b7c8785d17fd5f9bb433e274b1bdafe2d97de9193508d2b76473
2021-01-01 00:03:58
59
3
6e06d87090019ffc3ef3890b70994a14e4ed82c47ac9acb2f60878cac881cbb4
2020-12-30 20:12:14
60
3
ac1139417489042dc68370f5065b0b23f97a1dce248a0fabe102343807d034a7
2020-12-29 11:29:09
59
4
7eb0c0745339e28c46558461d797cb6ca67227c1e99872157048305c6ceb76ff
2020-12-27 16:49:26
60
1
58885c66f62cef3592e28845e6b677aaede8d01365c685c6e80839ac84676e6d
2020-12-27 16:48:55
60
2
d0707d6ed31885aee621add0b64049cd66e42009f21b8834978aa076762932a7
2020-12-27 16:43:26
60
2
71f7297aac12f888db16958827879c42330fe7082d471e241e8623f0dfa55593
2020-12-14 06:40:29
49
5
abace36ae111f54c62f9b9d0da82861b1fb3c6bba67a62a9a16c3d6e5f8cb64d
2020-12-14 06:40:14
53
10
d4fde4e691db3e70a6320e78657480e563a9f87935af873a99db72d6a9a83c78
2020-12-11 04:49:41
60
1
5c68a0fa132216213b66a114375b07b08dc0cb729ddcf0a29bff9ca7a22eaaf4
2020-12-11 04:47:27
60
3
de53e80411d94b39ea18d9f98cbb1bd6dc07ac2ab732753dec649fef458f3aad
2020-12-11 04:46:35
59
5
18008cf9278facb9d869d47271d8cf27a164e839d715e671b0b5584fe2faed30
2020-12-09 14:49:28
60
2
8bb2d0e3fa36c3f48233a5b5568c2cb558beccbbfb532816a206dcccb3f4ca12
2020-12-08 04:34:48
58
5
a6ac0eab0ea0d1c619c55068dc7473317fb0e622ab6f7fd73522cb814e0c61c4
2020-12-08 02:19:25
60
2
bdf5bd7172d7d8321d718d313b61eb8424284219341bfa856a69060375242885
2020-12-08 02:10:37
60
2
ea89e624ecdb64e9fdd06dcb9f4b0abe466fb57644a5692d92fddbdfd7ca1502
2020-12-06 04:37:18
59
2
196c394a8acc791298e6e0bf66684bc760774b3c18ae4f171f875686d2a2d37d
2020-12-04 17:56:08
57
1
33f12d904844bfa2062dc34e7b957bab1176a4424c3d73758a4ff8010f4b8bfd
2020-12-04 17:21:51
59
3
a5c961eec18d996636e03f138a2df8f4feebddc9283709ce68e511674771b72a
2020-12-02 11:33:21
60
2
47993b83c6acade28d191030cd014bba38ce2f705fb83f2e38a382952e893ae5
2020-12-02 08:24:25
60
2
30c379e2e27810b0b2225b55f1b922a85afa5f46cbbe1fcbdcd8f2bb19368a02
2020-11-29 23:17:17
60
2
267df480e652c7715164f6552b0d54df0c6f5f91fd447723fb510fb85b465348
2020-11-29 22:18:08
60
2
f6a3b53ce6eee84d73fad161a40e8ffcd0abeb44ab14db2b3610a29cacc2f9b5
2020-11-25 08:29:07
58
1
f96f41a91bff1744a47ebe70fada39a2912d5a7f5424f54e4662ec004c2acc4f
2020-11-25 08:13:40
60
2
ec04af371a6323de74833f91da07f2f57fa588cec437404c9ba6a4d3e777228a
2020-11-25 05:46:51
59
2
d316c8c2a4f8bb6a3ec18a7364336ad58ee620b4380df004ec0f5cdd2df560b3
2020-11-25 05:00:25
60
2
5b5f6c76ecc54013f16dbe78105b9b94a810d97a84aa6676366a6e6846faa9a4
2020-11-20 20:09:39
61
2
da02ee444c41be840bf337e1bad88f70d0783be107fed4a9816bed0d928b5dde
2020-11-20 19:10:01
61
2
62d6f144dd95997195f5df055fed6bf8929b391cd22fb53abaf5bfa09b50a246
2020-11-20 17:48:21
60
2
76a2ee12fa14b161b9063aa15a07161b1361c87a37695eff2e978262f20cce0c
2020-11-20 17:40:58
61
2
951fe84ea079e46f485ef1bf81686a4a9e333f33d70fc3a6ef5221a6837c75f2
2020-11-18 06:19:02
58
1
1a190981beb69371f433c31bb00c52a2597e5039573d28b116f34116a5f32b3a
2020-11-13 10:16:56
61
2
e66e797010e75aed0fd99f214db698d98cb5436327bd1a65bd08d536569652f9
2020-11-13 05:28:23
58
2
fa56d6d69ad164760f04f956cbb122559dd281f7c7e2a1fc10f0f6a18d4bb347
2020-11-12 04:47:44
57
2
e5dde75e8e63dbbaa43896f017c92dcaf53ce1dbbab4cb204bfa8dc8d22b3b8c
2020-11-11 23:00:48
61
2
c75729d0ec44a20597f05aa5470a213e37ee2c5b4ca0d7cee62206704ba40f97
2020-11-11 20:54:49
61
2
506c98a5d61435e03010e5641a324d9c6b45ec2682ad2477f9d3d92dbe60be9e
2020-11-09 15:38:13
59
2
ca2b0ec97ff3b486b410391c26a1ee4c0c18a64b334820347fb8f8881b841b27
2020-11-07 18:57:23
58
1
1cba45c4fca24038e00d14c6bc90e709eefa6fb3778ac10a681f3c41a94b7834
2020-11-05 05:19:17
61
7
8a36f671bcd68ed738575cab7dfb165b5e7dcf38da53dd196738dadee6c3232b
2020-11-05 03:12:33
60
11
54939ec9a3e2b9e6d770f83c4c865f16b16f17c491e3324414c19608ca28dfab
2020-10-25 13:54:55
51
3

Rule Matches per Month (last 24 months)